Permissions, roles, and access controls finance teams can actually trust.

Roles

Roles that map to how finance teams really work.

Admin, Finance, Member, Viewer, and the Workplace Associate role for restricted portal users. Members and Finance users carry a permission set admins can customize per user. Per-user entity grants layer on top; users see only the entities they're granted, in every report and search result.

• Admin, Finance, Member, Viewer roles.
• Workplace Associate role: restricted portal for PO submitters and vendor-mapped bill approvers.
• Per-user entity grants.
• Per-user permission customization.

Dual-Control Mode

Drafter and approver, designated and separated.

The Drafter / Approver / Both designation is available on every plan and is recorded in the audit log. Separation of duties is enforced today through approval workflows on Growth and Enterprise: a workflow with the option switched on will not route a journal entry, bill, AR invoice, intercompany transaction, or revenue-arrangement modification to the user who prepared it. Company-wide Dual-Control Mode across every GL-touching action is in development; settings changes stay governed by role-based permissions.

• Drafter / Approver / Both designations on every plan.
• Configurable approval chains (Growth and Enterprise).
• Separation of duties, per workflow, on the transactions a workflow routes.
• Per-record audit trail with provenance.

SSO and 2FA

SAML SSO and two-factor authentication.

SAML SSO with domain verification and just-in-time user provisioning on Growth (1 connection) and Enterprise (unlimited connections + enforcement). Two-factor authentication is available on every plan via email OTP or authenticator app (TOTP).

• SAML SSO: 1 connection on Growth, unlimited + enforcement on Enterprise.
• Two-factor authentication on every plan.
• Domain verification and just-in-time provisioning.
• Automatic 15-minute inactivity timeout on every session.

Audit trail

Every action recorded.

Immutable audit log of every user action against every record, capturing who changed what, what the prior value was, when the change was applied, and which IP and session.

Why Quoining

Real roles on every plan, not admin-or-nothing.

Entry-level tools give everyone the keys; enterprise suites sell role-based control back to you as an add-on. Quoining ships a full permission matrix, approval workflows, and an immutable audit log on every plan.

• Granular permissions across 41 actions, from posting to settings.
• Approval chains and separation of duties configurable per workflow.
• Every change carries who, what, and when, immutably.